Security: PolinRider malware detected in two open PRs (#7716, #10321)

说明与用途

PolinRider 恶意软件在两个开放 PR 中被发现，可实现对恶意代码的早期检测并提升开发安全性。首先手动检查元数据以确保兼容性，然后将检测集成到 CI 流水线中。生产就绪度为中等：适用于原型和内部流程，但需持续关注依赖和更新。

实际用途

Security: PolinRider malware detected in two open PRs (#7716, #10321) helps catch security and privacy issues earlier in the workflow.

• strengthen security checks
• add auth or privacy controls
• audit risk earlier

限制与审查说明

Medium: useful for prototypes or internal workflows, with dependency and maintenance checks before production.